Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdae1acf-147d-352d-acb1-17b7e39a704c.roa
File: fdae1acf-147d-352d-acb1-17b7e39a704c.roa (raw, json)
Hash identifier: Wb/2ge5BuVUw3QFwJYmi3G12FHBPT/0uVaxcpoTxroU=
Subject key identifier: B1:E3:07:40:D3:85:06:39:5F:71:C0:DB:CE:AA:68:C7:B3:CB:0E:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AFCADE5B04A71BFB09A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdae1acf-147d-352d-acb1-17b7e39a704c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.167.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:fc:ad:e5:b0:4a:71:bf:b0:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d9558223-26c2-4c73-b182-6c023ff32989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:f6:ca:83:59:28:03:62:8a:b2:23:5f:9d:
d1:31:5c:6e:2e:e9:74:b6:91:1c:f5:a4:0e:fd:80:
55:97:f4:31:8f:04:aa:d5:7f:78:50:c9:18:4f:16:
1e:fc:fd:6e:c3:62:33:7c:67:5d:4d:ee:e6:fd:c1:
1d:47:1d:45:1a:95:96:47:16:83:c9:9f:7b:4e:c7:
ec:22:7c:3c:69:3e:58:ba:35:c4:ca:24:c4:73:df:
52:36:ae:a8:98:ca:65:77:37:4f:55:92:ff:1a:96:
a5:27:36:c7:81:af:35:d3:e9:07:b5:7f:82:37:40:
f0:89:53:f4:68:5d:aa:6d:5b:2b:81:1c:d1:9a:08:
f7:e7:41:4e:10:fd:a4:6d:30:b9:97:0b:d0:e6:20:
01:9c:37:1c:65:04:f9:81:d2:1d:3d:43:ee:b7:28:
62:94:5b:05:7b:18:22:a2:63:f8:66:7b:e0:3f:0b:
f9:90:9a:12:88:5f:30:ee:4d:8a:92:e5:04:df:04:
3c:13:89:6c:72:9e:6c:03:71:4f:7f:32:27:dc:1d:
35:8a:c0:c8:c6:60:a1:29:28:34:64:4d:25:87:c7:
90:e0:9d:c5:53:11:9c:d9:d9:34:38:08:0e:9e:d2:
71:64:ed:44:22:be:5f:57:79:69:df:9d:ae:7f:67:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:07:40:D3:85:06:39:5F:71:C0:DB:CE:AA:68:C7:B3:CB:0E:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdae1acf-147d-352d-acb1-17b7e39a704c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.167.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:12:71:b4:c5:47:c5:de:98:4b:49:23:eb:cd:c5:80:e3:88:
1b:b2:d1:25:7c:18:b9:53:33:57:ea:20:90:5e:2a:46:d2:20:
b4:af:0b:95:90:d7:0f:37:cd:14:f1:08:b6:8a:a6:c1:b4:bd:
1f:fc:de:0d:c7:5d:f4:13:f2:d5:02:ce:13:ce:10:d8:c7:bb:
c1:68:32:b9:66:a9:92:75:04:17:10:47:c8:00:1b:3b:ba:49:
48:24:3b:5c:b4:29:03:24:39:20:fc:24:1e:80:01:62:28:43:
a2:6b:8f:34:3d:e2:01:b1:65:96:08:b0:1c:cd:e9:f3:36:ea:
44:00:36:b0:b7:70:60:1c:4f:c5:f7:f8:19:90:71:39:ab:29:
80:dc:c7:a9:87:f5:f9:0a:95:9d:5b:ea:02:2d:20:96:74:2d:
aa:32:61:f2:4a:94:be:cd:7d:dd:68:03:21:de:e3:d6:48:f6:
48:8e:87:a1:0d:3f:ed:31:99:04:76:23:26:0a:f2:21:6c:e0:
5f:02:d2:69:0b:c4:68:8f:eb:e9:e3:f9:dc:7d:69:43:42:96:
c9:76:b9:db:cd:7f:05:df:99:01:91:37:27:97:55:c2:d8:5b:
5d:0a:24:18:f6:9c:fb:d7:67:40:8e:00:98:fd:80:da:23:ff:
b1:ef:5a:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOvyt5bBKcb+wmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZDk1NTgyMjMtMjZjMi00YzczLWIxODItNmMwMjNmZjMyOTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR72yoNZKANiirIjX53RMVxuLul0tpEc9aQO
/YBVl/QxjwSq1X94UMkYTxYe/P1uw2IzfGddTe7m/cEdRx1FGpWWRxaDyZ97Tsfs
Inw8aT5YujXEyiTEc99SNq6omMpldzdPVZL/GpalJzbHga810+kHtX+CN0DwiVP0
aF2qbVsrgRzRmgj350FOEP2kbTC5lwvQ5iABnDccZQT5gdIdPUPutyhilFsFexgi
omP4ZnvgPwv5kJoSiF8w7k2KkuUE3wQ8E4lscp5sA3FPfzIn3B01isDIxmChKSg0
ZE0lh8eQ4J3FUxGc2dk0OAgOntJxZO1EIr5fV3lp352uf2eIDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHjB0DThQY5X3HA286qaMezyw6rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmRhZTFhY2YtMTQ3ZC0z
NTJkLWFjYjEtMTdiN2UzOWE3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSac6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANAScbTFR8XemEtJI+vNxYDjiBuy0SV8GLlTM1fqIJBeKkbSILSvC5WQ
1w83zRTxCLaKpsG0vR/83g3HXfQT8tUCzhPOENjHu8FoMrlmqZJ1BBcQR8gAGzu6
SUgkO1y0KQMkOSD8JB6AAWIoQ6JrjzQ94gGxZZYIsBzN6fM26kQANrC3cGAcT8X3
+BmQcTmrKYDcx6mH9fkKlZ1b6gItIJZ0LaoyYfJKlL7Nfd1oAyHe49ZI9kiOh6EN
P+0xmQR2IyYK8iFs4F8C0mkLxGiP6+nj+dx9aUNClsl2udvNfwXfmQGRNyeXVcLY
W10KJBj2nPvXZ0COAJj9gNoj/7HvWos=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:48:02 2025 by rpki-client